← Home

@granite-js/native

npm Repository

A native module hub package for Granite

42
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

jingjing2222heecheolghleegronxbgranite-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@types/react-native-video AI (phantom-deps): Type-only package loaded by convention; not directly imported but legitimately declared. ai
dependencies unvetted-dep:@react-native-community/blur AI (dependencies): Established React Native community package; expected dependency for a native module hub. ai

Versions (showing 42 of 42)

Version Deps Published
1.0.37 15 / 17
1.0.36 15 / 17
1.0.35 15 / 17
1.0.34 15 / 17
1.0.33 15 / 17
1.0.32 15 / 17
1.0.31 15 / 17
1.0.30 15 / 17
1.0.29 15 / 17
1.0.28 15 / 17
1.0.27 15 / 17
1.0.26 15 / 17
1.0.25 15 / 17
1.0.24 15 / 17
1.0.23 15 / 17
1.0.22 15 / 17
1.0.21 15 / 17
1.0.20 15 / 17
1.0.19 15 / 17
1.0.18 15 / 17
1.0.17 15 / 17
1.0.16 15 / 17
1.0.15 15 / 17
1.0.14 15 / 17
1.0.13 15 / 17
1.0.12 15 / 17
1.0.11 15 / 17
1.0.10 15 / 17
1.0.9 15 / 17
1.0.8 15 / 17
1.0.7 15 / 17
1.0.6 15 / 17
1.0.5 15 / 17
1.0.4 15 / 17
1.0.3 15 / 17
1.0.2 15 / 17
1.0.1 15 / 17
1.0.0 15 / 17
0.1.34 16 / 17
0.1.33 16 / 17
0.1.32 16 / 17
0.1.31 16 / 17

v1.0.37

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.36

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.35

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.34

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.